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MOBILE TERMINAL APPARATUS 

CROSS REFERENCE TO RELATED APPLICATIONS 
The present document is based on Japanese Priority- 
Application JP2003 - 061233 , filed in the Japanese Patent 
Office on March 7, 2003, the contents in which being 
incorporated herein by reference to the extent permitted by 
law. 

10 BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to a mobile 

terminal apparatus (in this specification it may be 
also called simply a terminal in the present 
15 specification) such as cellular phone devices and a 
Personal Digital Assistants (PDAs) . 

2. Description of Related Art 
Mobile terminal apparatuses such as a cellular 

phones- and a personal digital assistants- (PDA) s-)— may 
to be lost or stolen because of- ito their p ortability. 
When a mobile terminal apparatus storing personal 
information such as telephone book data, memo data, 
and electronic mail (email) data is stolen or lost, 
data including the personal information may be 
improperly accessed or altered. 

Although attempts have been made for assuring 
security against unauthorized access to data in a 
30 terminal when necessary through the introduction of 
various types of authentication methods, the 
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conventional authentication method is not 
necessarily effective considering the importance of 
personal information . 

5 Japanese Patent Publication No. 2001-309431 

discloses a technology in which, when a notification 
indicating that a mobile terminal apparatus is lost 
is sent to the location registration .center of the 
mobile terminal apparatus, the location registration 
10 center causes a base station to send a control signal 
to the mobile terminal apparatus to disable its key 
operation when the mobile terminal apparatus 
communicates with the base station and, after 
transferring internal data to the database of the 
15 location registration center, causes the mobile 
terminal apparatus to erase the data. 

SUMMARY OF THE INVENTION 
The technology disclosed in Japanese Patent 
Publication No. 2001-309431 requires the location 
registration center and a base station to perform 
specific processing. That is, the location 

registration center must manage and check a mobile 
terminal apparatus that is notified as lost and, when 
the mobile terminal apparatus notified as lost 
communicates with a base station, performs special 
processing including the generation and control of a 
signal to disable the mobile terminal apparatus 
operation and to transfer data. Another problem is 
that the user must notify the location registration 
center and wait for the notification to be reflected 
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on the processing of the location registration center 
and the base station. 

There is therefore need of providing a mobile 
5 terminal apparatus that protects data from those who 
intend to improperly access or browse internal data, 
without requiring a location registration center and 
a base station to perform special processing. 

10 There is also need of providing a mobile terminal 

apparatus that may protect data immediately when a 
need arises for protecting data or when a user gets 
notice of such situation. 

15 There is still a need of providing a mobile 

terminal apparatus that ensures that data in the 
terminal will be available for use even if the terminal 
is lost. 

20 A mobile terminal apparatus according to a 

preferred embodiment of the present invention 
includes storage means for storing data; 
communication means for communicating data via a 
communication network; authentication means for 

25 checking if a user is a proper user based on an 
operation of the user; and control means for 
transmitting predetermined data, which is included in 
the data stored in the storage means, to a 
predetermined server via the communication means when 

30 the result of authentication by the authe^it ication 
means is negative and, after the transmission is 
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completed/ erasing the predetermined data from the 
storage means. 

The authentication means performs 

5 authentication processing based on the user operation 
and, if the result is negative, the control means 
transmits the predetermined data from the storage 
means to the server to save the data and, after that, 
erases the data. This method effectively protects 
10 the data from being accessed/browsed or used 
improperly. 

Although the predetermined data may be 
determined by default, means for allowing the user to 
15 specify desired data should preferably be provided. 
Providing such means may allow the user to protect data 
not determined by default. 

The authentication means performs 

20 authentication, for example, when the user attempts 
to access the predetermined data. 

The data erase processing performed after the 
data is transmitted to the server may also be 

25 suppressed depending upon the type of data. Erasing 
data always requires the user to restore it at a later 
time. If the erase processing is suppressed 
according to the importance or relevance of the data, 
for example, if the erase processing is omitted for 

30 data that should be saved but need not be erased, there 
will be no need for the restore processing. 
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A mobile terminal apparatus according to another 
preferred embodiment of the present invention 
includes storage means for storing data; 
5 communication means for communicating an email via a 
communication network; and control means for 
transmitting predetermined data to a predetermined 
server when a previously specified instruction is 
received via a received electronic mail (hereinafter 
10 simply referred to as "email") and, after the 
transmission is completed, erasing the predetermined 
data from the storage means. 

When a proper user finds that his or her mobile 
15 terminal apparatus is lost, the user may remotely 
instruct the mobile terminal apparatus to save the 
data stored in the mobile terminal apparatus and then 
erase it. One proposed way of doing so is sending 
instruction via an email. In this case, the control 
20 means may transmit data to the server if at least one 
of the following two conditions is satisfied: one 
condition is that the information on the sender of the 
email matches the information on the sender, which is 
stored/registered in advance, and another condition 
25 is that the email is received a predetermined number 
of times within a given length or period of time . This 
method rejects an unauthorized instruction from an 
external source. 

30 Another method of allowing the proper user to 

remotely instruct the mobile terminal apparatus to 
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save data stored in the mobile terminal apparatus and 
then erase the data is by means of a telephone tone 
signal sequence. That is, the mobile terminal 
apparatus includes storage means for storing data; 
5 means for automatically receiving a telephone call; 
means for accepting the input of the tone signal during 
an automatic call receiving time; and control means 
for transmitting predetermined data to a 
predetermined server when a predetermined tone signal 
10 sequence is received and, after the transmission is 
completed, erasing the predetermined data from the 
storage. means . 

The mobile terminal apparatus described above 
15 is not always required to erase data but, when the 
authentication result of authentication means is 
negative, the mobile terminal apparatus is only 
required to transmit predetermined data., which is part 
of data stored in the storage means, to the 
20 predetermined server via the communication means. 
This method saves data in the server to ensure its 
availability . 

When the result of authentication is negative, 
25 the control means may suppress the authentication 
processing for accessing data from being executed at 
least for a given length of time. This preferred 
embodiment of the present invention does not save or 
erase data but suppresses the execution of 
30 authentication processing to reduce the number of 
authentication retries. When the result of 
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authentication is negative in a system where there are 
multiple authentication means, the control means may 
switch the authentication means to an authentication 
means of higher level, i.e. , an authentication means 
5 of higher complexity, for example. As a result, it 
is possible to reduce the rate of success when 
performing a retrial of an authentication . 

Suppression (or omission) of authentication 
10 processing and switching of authentication means are 
also effective when data is not transmitted (uploaded) 
to a servier or data is not erased. 

BRIEF DESCRIPTION OF THE DRAWINGS 
15 The above and other features and advantages of the 

present invention will become more apparent from the 
following description of the presently exemplary preferred 
embodiment of the present invention taken in conjunction with 
the accompanying drawings, in which: 
20 FIG, 1 shows a diagram showing an example of model 

of a system to which a preferred embodiment of the 
present invention is applied; 

FIG. 2 shows a block diagram of an example of 
configuration of a mobile terminal apparatus in the 
25 system according to FIG. 1; 

FIG.. 3 shows a block diagram of an example of 
configuration of a base station/control station in the 
system according to FIG. 1; 

FIG. 4 shows a block diagram of an example of 
30 configuration of a server in the system according to 
FIG. 1; 
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FIG. 5 shows a flowchart of an example of first 
upload processing in a preferred embodiment of the 
present invent ion ; 

FIG. 6 shows a flowchart of an' example of second 
5 upload processing in a preferred embodiment of the' 
present invention ; 

FIG. 7 shows a flowchart of an example of third 
upload processing according to a preferred embodiment 
of the present invention; 
10 FIG. 8 shows a block diagram of an example of 

configuration of a mobile terminal apparatus 
corresponding to the third data upload processing 
shown in FIG. 7; and 

FIG. 9 shows a flowchart of data download 
15 processing according to a preferred embodiment of the 
present invention. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 
OF THE INVENTION 
20 Preferred embodiments of the present invention 

will be described in detail as follows, with reference 
to the accompanying drawings . 

FIG. 1 shows an example of the model of a system 
25 to which a preferred embodiment of the present 
invention is applicable. The system includes a 
mobile terminal apparatus 100 that may be a cellular 
phone, a base station/control station 200, and a 
server 300. The base station and the control station 
30 are shown as a station with the functions of both 
stations. Although connected directly to the base 



8 



80001-2934 Attorney Docket No.: SON-2934 

MARKED UP SPECIFICATION Application No.: 10/790,676 



station/control station 200, the server 300 may be 
connected via a gateway and a communication network 
such as a public communication network. 

5 FIG. 2 shows an example of a configuration of 

the mobile terminal apparatus 100. A controller 120 
controls the components of the mobile terminal 
apparatus 100 via a control line 150 and a data line 
160. A communication circuit 102, connected to the 

10 control line 150, communicates audio and other kinds 
of data to or from the base station/control station 
200 via an antenna 101 . A display unit 107 , connected 
to'the control line 150 and the data line 160, has a 
display device or apparatus such as a liquid crystal 

15 display to display various kinds of information. An 
operation unit 10 6 , connected to the control line 15 0 , 
has, for example, various operation keys and a jog dial 
to accept an input operation by the user. A memory 
105, connected to the control line 150 and the data 

20 line 160, has storage devices such as a ROM, a RAM, 
and a flash memory to store various programs and data. 
The memory 105 forms a data holding unit that will be 
described later. A notification unit 108 may be 
composed of a vibrator, a LED or other means for 

25 visualization, for example. Such unit, connected to 
the control line 150, notifies the user about an 
incoming call in a selected way. A microphone 103 and 
a speaker 104, connected to the data line 160, send 
and receive audio data. 
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base station/control station 200. A controller 203 
controls the components of the base station/control 
station 200 via a control line 250 and a data line 260. 
A communication circuit 202, connected to the control 
5 line 250, communicates sound and data to or from the 
mobile terminal apparatus 100 via an antenna 201. A 
memory 204, connected to the control line 250 and the 
data line 260, has storage devices such as a ROM, a 
RAM, and a flash memory to store, for example, various 
10 programs and data. A wired transmission line 
interface (I/F) 205, connected to the control line 250 
and the data line 260, is connected to an external 
device via a wired transmission line 206. 

15 FIG. 4 shows an example of configuration of the 

server 300 . A controller 303 controls the components 
of the server 300 via a control line 350 and a data 
line 360. A wired transmission line interface (I/F) 
301, connected to the control line 350 and the data 

20 line 360, is connected to an external device via a 
wired transmission line 306 . A memory 304 , connected 
to the control line 350 and the data line 360, has 
storage devices such as a ROM, a RAM, and a flash memory 
to store various programs and data. An external 

25 storage device 302, a large-capacity storage device 
such as a hard disk device, is connected to the control 
line 350 and the data line 360. An operation unit 305 
has input means such as a keyboard and a pointing 
device to accept an input operation from the user. 

3 0 The server 300 may also have a display unit , not shown, 
including a display device. 
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The operation of this embodiment of the present 
invention will be described below. In principle, 
data is uploaded in this embodiment from the mobile 
5 terminal apparatus ICQ to the server to send the data 
according to a predetermined condition and then the 
data in the mobile terminal apparatus is erased. 
Uploading in this embodiment means saving of data. 
The following describes three examples each of which 
10 showing different factors that may trigger uploading. 

Data to be uploaded in this embodiment may be 
predetermined data in the data holding unit or a folder 
(including a mailbox) of data. In addition to or 
15 instead of such data, data to be uploaded may be any 
user- specif ied data or folder. Data to be uploaded 
is called ''specified data" in this specification. 

FIG, 5 shows a first example of upload processing 
20 according to a preferred embodiment of the present 
invention . 

When the first upload processing is used, it is 
supposed that at least authentication is performed 
25 when data to be uploaded is accessed. That is, even 
if authentication is not set initially for data that 
is accessed for browsing, authentication is 
automatically set when the data, specified as data to 
be uploaded, is accessed for uploading. 
30 Authentication, which confirms whether the user is 
.authorized to access data, is usually performed on a 
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cellular phone by receiving a password and checking 
its validity. It has to be noted that the 
authentication method is not limited to a password 
authentication method . 

5 

Referring to FIG. 5, when the user attempts to 
access predetermined specified data (Yes in 8501), 
authentication processing is started, in step S502. 
For example, the user is requested to enter a password 

10 and the entered password is compared with a registered 
password, in step S502. If the passwords match, it 
is judged that the authentication is successful (Yes 
in S503 ) and the data is displayed to allow the user 
to perform operations, for example, to add, change, 

15 or delete data, as required, in step S509. If a 
password mismatch occurs more times than is 
pre-defined (No in S503) , it is judged that an 
authentication -error has occurred and the key 
operation is disabled, in step S504. This 

20 temporarily disables the acceptance of a key operation 
from the user. The mobile terminal apparatus 
accesses the network to transmit the specified data 
to the server, in step S505 . It is assumed that server 
access information is saved in advance in the mobile 

25 terminal apparatus and that the authorized user of the 
mobile terminal apparatus has already been registered 
for the service provided by the server. When the data 
transmission is finished (Yes in S506) , the specified 
data in the mobile terminal apparatus is erased, in 

30 step S507. After that, the disabled key operation is 
enabled, in step S508 and the processing ends. 
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The processing described above causes the server 
to ''pump up" the specified data upon detecting an 
authentication error when a user who does not know a 
5 password attempts to improperly acces s /browse the 
specified data, thus preventing the user from 
improperly accessing the specified data. As it will 
be described later, a proper user can download this 
''pumped up" data back at a later time to the recovered 
10 mobile terminal apparatus or to a separate new 
terminal . 

The first example of upload processing shown in 
FIG. 5 starts its function upon detecting an 

15 unauthorized access to a mobile terminal apparatus. 
It is also possible for a proper user, who has lost 
a mobile terminal apparatus, to remotely control the 
lost terminal via a communication network for 
uploading and erasing the specified data. This 

20 processing, a second example of upload processing 
according to a preferred embodiment of the present 
invention will be described with reference to FIG. 6. 

The second example of upload processing is 
25 started by a proper user sending a specific electronic 
mail (also called simply an email in this 
specification) to a mobile terminal apparatus from 
which data is to be uploaded. To allow the user to 
do so, a predetermined keyword is included in the 
30 header information of the email. For example, a mail 
is sent to the mail address of the mobile terminal 
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apparatus, for example, with a character string such 
as "*upload" in the Subject area of the email. The 
Message area of the mail may be left blank or may 
contain a fixed sentence in advance . A mail like this 
5 may be prepared in advance in the mobile terminal 
apparatus. The proper user is supposed to set the 
keyword in the mobile terminal apparatus, in advance. 

Referring to FIG. 6, upon receiving a mail (Yes 

10 in S601), the mobile terminal apparatus checks the 
header information of the received mail, in step S602 . 
If the mail is not an upload instruction mail as a 
result of the checking (No in 8603), usual mail 
processing is performed, in step S611. If the mail 

15 is an upload instruction mail (Yes in S603), 
verification is made if a predetermined condition is 
satisfied, in step S604. The checking of this 
'^predetermined condition" is another authentication 
function added to the header information checking. 

20 For example, at least one of the following two 
conditions may be used. as the predetermined condition: 
one condition is that the sender information on the 
mail (sender's mail address, sender's name, etc,) 
matches a pre - registered sender information and 

25 another condition may be that the upload instruction 
mail, is received a specified number of times within 
a specified time period. Verification of such a 
predetermined condition is preferably done when the 
header information checking is not enough, but this 

30 verification/checking is not always required. 
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If the predetermined condition is not satisfied, 
control is passed to step S611 to perform usual mail 



satisfied, the key operation is disabled, in step S605. 
5 Then, the mobile terminal apparatus accesses the 
network and transmits the specified data to the server , 
in step S606. After the transmission is finished, 
(Yes in S607), the specified data is erased, in step 
S608. Then, a response mail indicating that the 

10 specified data has been uploaded and erased is 
returned to the sender of the upload instruction mail, 
in step S609 . Such a return mail may also be prepared 
in advance in the mobile terminal apparatus as the 
template. After that, the disabled key operation is 

15 enabled, in step 8610 and the processing is ended. 

As described above, the second data upload 
processing allows the user to upload the specified 
data stored in the mobile terminal apparatus and then 
20 erase it by sending an upload instruction mail from 
outside the mobile terminal apparatus. 

Next, a third example of data upload processing 
according to a preferred embodiment of the present 

25 invention will be described with reference to FIG. 7. 
The third example of data upload processing is similar 
to the second data upload processing in that the proper 
user of a mobile terminal apparatus controls the lost 
mobile terminal apparatus remotely via a network 

30 except that the mobile terminal apparatus is 
controlled via sound, not by mail. In this case, the 



processing . 



If the predetermined condition is 
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DTMF (Dual Tone Multi-Frequency) signal, called a tone 
signal, is usually used. This signal is an analog 
signal generated by pressing a touch-tone button on 
a telephone apparatus. Upon receiving a 

5 predetermined tone signal sequence, the receiver can 
recognize that a predetermined instruction is 
received from an external source. 

More specifically, a mobile terminal apparatus 
10 such as a state-of the-art cellular phone has a 
function that places the mobile terminal apparatus in 
the message memo (answer phone) mode if a call is not 
answered within a predetermined number of call rings. 
During this response time, the input of the tone signal 
15 is accepted and, when the specified tone signal 
sequence is received, the terminal can move to this 
processing. Alternatively, after accepting a 
message memo, the terminal enters the automatic 
response mode to accept the input. In some cases, a 
20 malicious third party answers the call, in which case, 
the terminal cannot enter the automatic response mode . 
However, this third data upload processing is still 
useful when combined with other data upload processing 
described above. 

25 

Referring to FIG. 7, when a mobile terminal 
apparatus automatically receives a telephone call 
(Yes in S701) , the mobile terminal apparatus enters 
the automatic response mode, in step S702, and 
30 performs authentication processing, in step S703 . 
The authentication processing is performed, for 
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example, by receiving a password and checking if it 
is correct. If the authentication is not successful 
(No in S704) , the line is disconnected, in step S713) 
and the processing is ended. 

5 

If the authentication is successful (Yes in S704) , 
the mobile terminal apparatus accepts the command, in 
step S705) . If this command does not match the 
pre- registered command instructing to upload data 
10 (Yes in S706) , the line is disconnected, in step S713, 
and the processing is ended. Several retries may be 
attempted before the line is disconnected. 
Preferably, the command is a numeric string registered 
in advance by the terminal user. 

15 

If the commands match (Yes in S706), the line 
is disconnected, in step S707, and the data upload 
processing is started. That is, the key operation is 
disabled, in step S708, and the specified data is 
20 transmitted to the server, in step S709. When the 
transmission is ended (Yes in S710) , the specified 
data in the terminal is erased, in step S711. After 
that, the disabled key operation is enabled, in step 
S712 and the processing is ended. 

25 

It is possible that, after entering the automatic 
response mode and while the line is connected, an audio 
message created in advance may be generated and sent 
to the calling party to notify him or her about the 
30 operation guide and the operation result in response 
to the operation performed by the calling party. 
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Although the line is once disconnected in step 
S707 for data communication, the line may be 
disconnected not in step S707 but after the processing 
5 is ended, if sound communication and data 
communication can be performed at the same time. In 
that case, an audio message, typically a voice message, 
may be sent indicating that upload processing has 
completed. Alternatively, with a mail address (other 
10 that the one allocated to the terminal) of the proper 
user registered in the terminal in advance, the 
notification message may be sent automatically to the 
mail address when the upload processing is completed 
to notify the user about the status. 

15 

FIG. 8 shows an example of configuration of a 
mobile terminal apparatus capable of performing the 
third data upload processing in FIG. 7. This 
configuration is similar to the configuration shown 

20 in FIG. 2 except that an automatic response unit 109 
is added. The automatic response unit 109 at least 
has a function to accept the tone signal described 
above and identify it and, preferably, an automatic 
voice response function. The rest of the 

25 configuration is similar to that shown in FIG. 2 and 
so will not be described in detail. 

FIG. 9 shows data download processing that is 
performed to restore data, uploaded to the server as 
30 described above, to a terminal according to an 
instruction from the user of the mobile terminal 
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apparatus from which the data was uploaded. The data 
does not need to be downloaded to the mobile terminal 
apparatus from which the data was uploaded nor does 
the data need to be downloaded to a mobile terminal 
5 apparatus of the same type. The user can also access 
the server from other terminals, such as a personal 
computer (PC) . 

It is supposed that a password for each user (user 

10 ID) is set in the server 300 for use in authentication. 

The mobile terminal apparatus 100 can browse the web 

page of the server via the base station/control 

station. The data of the specified web page is saved 

on the external storage device 302 of the server 300. 

15 When a mobile terminal apparatus accesses the 

specified web page, in step S901, authentication 

processing is started, in step S902. During 

authentication processing, the user name and the 

password are entered, for example, via the operation 

20 unit 106 of the mobile terminal apparatus and the 

received information is sent to the server 300 via the 

» 

base station/control station. The server 

authenticates the user by comparing the received 
information with the password of each user stored in 

25 the server in advance. If the received user name is 
not found or, if found, a password mismatch is found, 
the server judges that an authentication error occurs 
(No in 8903) and sends a notification to the terminal 
indicating the error. In response to this 

30 notification, the terminal notifies the user about the 
error, in step S904. Any notification method may be 
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used; for example, a message is displayed on the 
display unit of the terminal, the LED is lit, a sound 
is generated, or a vibration is generated. 

5 If the au t he nticationis successful (YesinS903), 

the user is requested to select download items, in step 
S905. In this case, it is possible to allow the user 
to select the saving destination of each selection 
item. If data with the same name as that of a download 

10 item is already in the selected saving destination, 
the data with the same name is overwritten. It is also 
possible to omit the step of overwrite saving if it 
is found, as a result of comparison between the two, 
that the data to be overwritten is identical to the 

15 data of a download item. Alternatively, instead of 
overwrite saving, synchronization may be established 
between the two so that the old data is changed to the 
new data . Authentication may be performed, not in the 
position shown in the flowchart, but after step S905. 

20 

Then, the selected data is downloaded , in step 
S906 . If the uploaded data is fixed data (for example, 
address book, received mail folder, etc.) and no 
selection is necessary, step 8905 may be omitted and 
25 S906 turns simply into a step of downloading data. 

The download is finished when ''end notification" 
is received from the server (Yes- in S907). At this 
time, a message is displayed, for example, on the 
30 display unit to notify the user that the download is 
finished, in step S908, and then the processing is 
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ended. The server may erase the downloaded data. 
This erasure may be done either automatically or upon 
receiving an instruction or agreement from the user. 

5 Although the present invention has been 

described through preferred embodiments thereof, it 
is to be understood that the present invention is not 
limited to such embodiment but that various changes, 
modifications, combinations and sub combinations are 
10 possible without departing from the scope and spirit 
of the present invention. 

For example, although a password authentication 
is used in the authentication method in step S502 in 

15 FIG. 5, the authentication method is not limited to 
this. For example, fingerpr int . authentication is 
possible on a terminal with the fingerprint 
authentication interface. For a proper user, a 
fingerprint authentication error is less likely to 

20 occur; therefore, a single authentication error (with 
no retry) , if found, could be regarded that an 
unauthorized person attempted to access data. 

when multiple authentication methods are 
25 available, the authentication method may be changed 
according to data that is accessed. Alternatively, 
multiple authentication methods may be combined. In 
this case, one of the following actions may be taken: 
(a) if an error is found in one of the methods, control 
30 is passed to step S504; (b) when an authentication 
error occurs, the authentication method is changed to 
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the one at a higher authentication security level. 

Although erased after being uploaded in the 
embodiment, data need not always be erased. 
5 , Alternatively, whether to erase may be predetermined 
depending upon the type of data. In this case, the 
type of data to be erased may be either fixed or 
selected by the user. In either case, if data is not 
erased, it is preferable that data not be accessed at 

10 least for a given length of time (prevents 
authentication processing) . Instead, it • is also 
possible that multiple authentication methods 
prepared in advance are used beginning with the lowest 
security level method and, after an authentication 

15 error is found, a higher security level method is used. 
Although data need not be uploaded if not erased, the 
data may also be uploaded to ensure the data in the 
terminal after the terminal is lost. 

20 It is also possible that, with a security level 

assigned to all data, whether or not the data is 
specified data, what authentication method is used, 
and what processing (whether to erase, whether to 
upload) is to be performed after an authentication 

25 error is found are set automatically based on the 
security level. The user may also specify them 
manually . 

Although data itself is specified for uploading 
30 in the above description, data to be uploaded may also 
specif ied at an application level . In this case, data 
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to be uploaded is data related to the application. 

Although whether the received password matches 
the registered password is used as the match condition 
5 for password authentication in the above embodiment, 
the question and answer authentication method is also 
possible. That is, whether the user responds with an 
answer that matches the answer prepared for the user 
in adva.nce may be used as the condition. 

10 

Although a specified web page is accessed using 
a user ID, the specified web page (URL) may be provided 
for each user to eliminate the need for the user to 
enter the user ID. 

15 

After step S904 in FIG. 9, it is also possible 
to prevent the user related data from being downloaded 
from the specified web page for a given length of time. 
In addition, the server may send a mail to the user 

20 corresponding to the user name indicating that the 
user has made an authentication error when issuing a 
download request . Because an authentication error is 
sometimes generated because a proper user forgets the 
password, the mail may include the password to notify 

25 the user again about the password. 

After selecting items in step S905, it is also 
possible to allow the user to browse and edit the 
selected data. Data can be easily updated (for 
30 example, a new item can be added to the address book) 
by accessing the selected data via some other 
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apparatus, editing the data, and downloading the data 
from the mobile terminal apparatus to establish 
synchronization . 
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We claim: 

1. A mobile terminal apparatus comprising: 
storage means for storing data; 

communication means for communicating data via 
5 a communication network; 

authentication means for checking if a user is 
a proper user based on an operation by said user; and 

controller for transmitting specified data 
among data stored in said storage means to a specified 
10 server via said communication means when a result of 
authentication by said authentication means is 
negative, and erasing said specified data from said 
storage means. 

15 2 . The mobile terminal apparatus according to claim 
1, further comprising specifying means for specifying 
said specified data. 

3 . The mobile terminal apparatus according to claim 
20 1, wherein said authentication is performed by said 
authentication means when a user attempts to access 
said specified data. 

4. The mobile terminal apparatus according to claim 
25 1, wherein said data erasing process performed after 

transmittal to said server is suppressed depending 
upon type of said data. 

5. A mobile terminal apparatus comprising: 
30 storage means for storing data; 

communication means for communicating an 
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electronic mail via a communication network; and 

controller for transmitting specified data to 
a specified server when a specified instruction is 
received via said received electronic mail and erasing 
5 said specified data from said storage means after said 
transmission is completed. 

6 . The mobile terminal apparatus according to claim 
5, wherein said controller transmits data to said 
10 server only when at least one of the following 
conditions (A) and (B) is fulfilled: 

(A) Information regarding a sender of said 
electronic mail matches previously registered sender 
inf orma t ion ; 

15 (B) Said electronic mail is received a specified 

number of times during a specified period of time. 

7. The mobile terminal apparatus according to claim 
5, wherein said data erasing process performed after 

20 transmittal to said server is suppressed depending 
upon type of said data. 

8. A mobile terminal apparatus comprising: 
storage means for storing data; 

25 answering means for automatically answering an 

incoming telephone call; 

receptor for receiving a tone signal input at 
time of said automatic answering ; and 

controller for transmitting specified data to 
30 a specified server when receiving a specified series 
of tone signals, and erasing said specified data from 
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said storage means after said transmission is 
completed . 

9. The mobile terminal apparatus according to claim 
5 8, wherein said data erasing process performed after 

transmittal to said server is suppressed depending 
upon type of said data. 

10. A mobile terminal apparatus comprising: 
10 storage means for storing data; 

communication means for communicating data via 
a communication networks- 
authentication means for checking if a user is 
a proper user based on an operation by said user; and 
15 controller for transmitting specified data 

included in data stored in said storage means to a 
specified server via said communication means when a 
result of authentication by said authentication means 
is negative . 

20 

11. The mobile terminal apparatus according to claim 
10, wherein said controller inhibits execution of said 
authentication process of said authentication means 
at least for a period of time, when a result of 

25 authentication by said authentication means is 
negative . 

12 . The mobile terminal apparatus according to claim 
10, further comprising a plurality of said 
30 authentication means, wherein operation is shifted to 
an authentication means of higher complexity among 
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said plurality of said authentication means when a 
result of authentication by said authentication means 
is negative . 

5 13. A mobile terminal apparatus comprising: 
storage means for storing data; 

authentication means for checking if a user is 
a proper user based on an operation by said user when 
a user attempts to access predetermined or specified 
10 data among data stored in said storage means; and 
controller for inhibiting execution of said 
authentication process of said authentication means 
at least for a period of time, when a result of 
authentication by said authentication means is 
15 negative. 

14. A mobile terminal apparatus comprising: 
storage means for storing data; 

a plurality of authentication means for checking 
20 if a user is a proper user based on an operation by 
said user when a user attempts to access predetermined 
or specified data among data stored in said storage 
means; and 

controller for shifting operation to an 
25 authentication means of higher complexity among said 
plurality of said authentication means when a result 
of authentication by said authentication means is 
negative. 
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Abstract 

A mobile terminal apparatus checks if a user is 
a proper user based on the operation of the user and, 
5 if the result of authentication is negative, uploads 
predetermined data, which is part of data stored in 
a memory, to a predetermined server. After the 
transmission is completed, the mobile terminal 
apparatus erases the uploaded data from the memory. 

10 It is also possible to instruct the mobile terminal 
apparatus to upload and erase data from an external 
source using an electronic mail or a telephone tone 
signal sequence. This may protect data contained in 
mobile terminal apparatus that has been lost, from a 

15 person who improperly attempts to access the data. 
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